Privacy Policy

• Account details — your name, email address, and a password (stored only as a secure hash, never as plain text).
• Profile choices — optional details you choose to share during onboarding or later, such as gender, birthday (for your star sign), focus areas, goals, and coaching preferences.
• Activity you log — habits, workouts, sleep, meals, mood, supplements, weight, bloodwork values, notes, and reminders you create. This can include health-related information; you decide what to enter.
• Orion conversations — messages you send to the AI coach, kept so your chat history works. With "Let Orion remember" on, Orion also keeps short notes about people and situations you tell him about; you can read and delete each note in Orion's settings, and everything is erased with your account.
• Push notification token — if you allow notifications, your device's push token, which we share with Apple only to deliver your reminders. Revoking notification permission stops this.
• Usage analytics — first-party, privacy-preserving events (like "onboarding completed") tied to your account so we can see what works. No third-party analytics or tracking SDKs, no advertising identifiers.
• Social features — friend connections and the activity summaries your friends can see when you connect with them.

We do not collect your precise location, contacts, or advertising identifiers.

• To run Orbit: power your Orb, streaks, levels, and progress views.
• To personalize coaching: Orion uses your logged data and profile to give relevant suggestions. Orion conversations are processed by our AI provider (Anthropic) to generate responses; they are not used to train third-party models per our provider agreement.
• To show cosmic features you opted into (star sign, readings) from your birthday.
• To send reminders you turned on. You can switch them off anytime.

We do not sell your data. We do not show ads. We do not share your health information with advertisers or data brokers — ever.

Only the infrastructure that runs the app: our hosting provider (Vercel), our database provider (Neon), our AI provider (Anthropic) for Orion responses, our email provider (Resend) for password resets, and Apple's push notification service for reminders you turn on. If you sign in with Apple or Google, that sign-in is handled by Apple or Google respectively — we receive only your email address and name from them. Each processes data solely to provide their service to us.

• Edit — you can change your profile and remove logged entries in the app.
• Delete your account — Account → Delete account permanently erases your account and all associated data (logs, chats, connections) immediately. This cannot be undone, and it works entirely in-app — no email or support request required.
• Ask us anything — email privacy@theorb.app for a copy of your data or with any privacy question.

Data is encrypted in transit (TLS) and stored with a managed cloud database provider. Passwords are hashed with bcrypt. We keep your data for as long as your account exists; deleting your account removes it immediately.

Orbit is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

If our practices change, we will update this page and the effective date above. Meaningful changes will be announced in the app.